The Package Registry Layer: How Supply-Chain Attacks Are Targeting Agent Infrastructure

The LiteLLM Breach and the New Reality of AI Infrastructure On March 24, 2026, the Python Package Index (PyPI) hosted malicious versions of the LiteLLM library—specifically 1.82.7 and 1.82.8—for ...
CPO Magazine

LiteLLM Supply Chain Attack Affects Over 2,500 Organizations and More Than 434,000 CI/CD Pipelines

A massive supply chain attack on LiteLLM open-source AI gateway has exposed the authentication secrets of over 2,500 ...
CSOonline

Python package security in 2026: How supply chain attacks are targeting your AI development environment

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — unknowingly installed malicious code. A threat actor group known as TeamPCP ...
ZDNet

Python programming language: Google funds projects aimed at supply-chain security

Python is critically important to both Google Cloud and, therefore, to users of Google Cloud, and is also used by the search engine giant internally to power many of its core products and services.
Dark Reading

W4SP Stealer Stings Python Developers in Supply Chain Attack

Attackers continue to create fake Python packages and use rudimentary obfuscation techniques in an attempt to infect developers' systems with the W4SP Stealer, a Trojan designed to steal ...
Dark Reading

15-Year-Old Python Flaw Slithers into Software Worldwide

A 15-year-old flaw in the Python open source programming language has remained unpatched in many places, making its way into hundreds of thousands of both open source and closed source projects ...
Business Wire

Blue Yonder Develops Model Training Factory to Power the Autonomous Supply Chain With NVIDIA

DALLAS & SAN DIEGO--(BUSINESS WIRE)--Blue Yonder, the AI company for supply chain, today announced its Model Training Factory, built on NVIDIA Nemotron, to accelerate the development of specialized AI ...